Providing accurate, up to date exam questions of popular IT exams

Learning Knowledge Brings Hope

Practice Makes Perfect

Practicing AZ-900 : Microsoft Azure Fundamentals

NO.1 What are two characteristics of the public cloud? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
(A) Dedicated hardware.
(B) Unsecured connections.
(C) Limited storage.
(D) Metered pricing.
(E) Self-service management.
Answer : D;E
NO.2 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.When planning to migrate a public website to Azure, you must plan to *** PAY MONTHLY USAGE *** costs.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Deploy a VPN.
(C) Pay to transfer all the website data to Azure.
(D) Reduce the number of connections to the website.
Answer : A
NO.3 Your company plans to migrate all its data and resources to Azure.The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure.You need to deploy an Azure environment that supports the planned migration.Solution: You create an Azure App Service and Azure SQL databases.Does this meet the goal?
(A) Yes.
(B) No.
Answer : A
NO.4 Your company hosts an accounting named App1 that is used by all the customers of the company.App1 has low usage during the first three weeks of each month and very high usage during the last week of each month.Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
(A) High availability.
(B) High latency.
(C) Elasticity.
(D) Load balancing.
Answer : C
NO.5 You plan to migrate a web application to Azure. The web application is accessed by external users.You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application.What should you include in the recommendation?
(A) Software as a service (SaaS).
(B) Platform as a service (PaaS).
(C) Infrastructure as a service (IaaS).
(D) Database as a service (DaaS).
Answer : B
NO.6 You have an on-premises network that contains 100 servers.You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs.What should you include in the recommendation?
(A) A complete migration to the public cloud.
(B) An additional data center.
(C) A private cloud.
(D) A hybrid cloud.
Answer : C
NO.7 You plan to deploy several Azure virtual machines.You need to ensure that the services running on the virtual machines are available if a single data center fails.Solution: You deploy the virtual machines to two or more scale sets.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.8 You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive.What should you create?
(A) An Azure SQL database.
(B) A virtual machine data disk.
(C) A Files service in a storage account.
(D) A Blobs service in a storage account.
Answer : C
NO.9 Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.What should the company use to build, test, and deploy predictive analytics solutions?
(A) Azure Logic Apps.
(B) Azure Machine Learning Studio.
(C) Azure Batch.
(B) D. Azure Cosmos DB.
Answer : B
NO.10 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.*** AZURE POLICIES PROVIDE *** a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Resource groups provide.
(C) Azure Resource Manager provides.
(D) Management groups provide.
Answer : C
NO.11 Your company has several business units.Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources.You need to recommend a solution to automate the creation of the Azure resources.What should you include in the recommendations?
(A) Azure Resource Manager templates.
(B) Virtual machine scale sets.
(C) The Azure API Management service.
(D) Management groups.
Answer : A
NO.12 Which Azure service should you use to correlate events from multiple resources into a centralized repository?
(A) Azure Event Hubs.
(B) Azure Analysis Services.
(C) Azure Monitor.
(D) Azure Log Analytics.
Answer : D
NO.13 You have an Azure environment. You need to create a new Azure virtual machine from an Android laptop.Solution: You use PowerShell in Azure Cloud Shell.Does this meet the goal?
(A) Yes.
(B) No.
Answer : A
NO.14 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.An Azure region *** CONTAINS ONE OR MORE DATA CENTERS *** that are connected by using a low-latency network.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Is found in each country where Microsoft has a subsidiary office.
(C) Can be found in every country in Europe and the Americas only.
(D) Contains one or more data centers that are connect by using a high-latency network.
Answer : A
NO.15 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must *** BE DEPLOYED TO A SEPARATE VIRTUAL NETWORK ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Run a different operating system than the other virtual machines.
(C) Be deployed to a separate resource group.
(D) Have two network interfaces.
Answer : A
NO.16 A support engineer plans to perform several Azure management tasks by using the Azure CLI.You install the CLI on a computer.You need to tell the support engineer which tools to use to run the CLI.Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
(A) Command Prompt.
(B) Azure Resource Explorer.
(C) Windows PowerShell.
(D) Windows Defender Firewall.
(E) Network and Sharing Center.
Answer : A;C
NO.17 You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI.You need to recommend a storage solution for the data.Which two solutions should you recommend? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
(A) Azure Data Lake.
(B) Azure Cosmos DB.
(C) Azure SQL Data Warehouse.
(D) Azure SQL Database.
(E) Azure Database for PostgreSQL.
Answer : A;C
NO.18 You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?
(A) Azure Service Fabric.
(B) Azure Monitor.
(C) Azure virtual machines.
(D) Azure Advisor.
Answer : B
NO.19 An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.20 You have an Azure environment that contains 10 virtual networks and 100 virtual machines.You need to limit the amount of inbound traffic to all the Azure virtual networks.What should you create?
(A) One network security group (NSG).
(B) 10 virtual network gateways.
(C) 10 Azure ExpressRoute circuits.
(D) One Azure firewall.
Answer : D
NO.21 You have an Azure environment that contains multiple Azure virtual machines.You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.You need to recommend which Azure resources must be created for the planned solution.Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) A virtual network gateway.
(B) A load balancer.
(C) An application gateway.
(D) A virtual network.
(E) A gateway subnet.
Answer : D;E
NO.22 Your company plans to move several servers to Azure.The company's compliance policy states that a server named FinServer must be on a separate network segment.You are evaluating which Azure services can be used to meet the compliance policy requirements.Which Azure solution should you recommend?
(A) A resource group for FinServer and another resource group for all the other servers.
(B) A virtual network for FinServer and another virtual network for all the other servers.
(C) A VPN for FinServer and a virtual network gateway for each other server.
(D) One resource group for all the servers and a resource lock for FinServer.
Answer : B
NO.23 Your company has an Azure environment that contains resources in several regions.A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located.You need to create the Azure resource that must be used to meet the policy requirement.What should you create?
(A) A read-only lock.
(B) An Azure policy.
(C) A management group.
(D) A reservation.
Answer : B
NO.24 You need to configure an Azure solution that meets the following requirements:.Secures websites from attacks.Generates reports that contain details of attempted attacks.What should you include in the solution?
(A) Azure Firewall.
(B) A network security group (NSG).
(C) Azure Information Protection.
(D) DDoS protection.
Answer : D
NO.25 Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements.What should you use?
(A) The Knowledge Center.
(B) Azure Marketplace.
(C) The Azure portal.
(D) The Trust Center.
Answer : D
NO.26 Your company plans to automate the deployment of servers to Azure.Your manager is concerned that you may expose administrative credentials during the deployment.You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.What should you include in the recommendation?
(A) Azure Key Vault.
(B) Azure Information Protection.
(C) Azure Security Center.
(D) Azure Multi-Factor Authentication (MFA).
Answer : A
NO.27 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.If a resource group named RG1 has a delete lock, *** ONLY A MEMBER OF THE GLOBAL ADMINISTRATORS GROUP *** can delete RG1.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) The delete lock must be removed before an administrator.
(C) An Azure policy must be modified before an administrator.
(D) An Azure tag must be added before an administrator.
Answer : B
NO.28 Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
(A) A Canadian government contractor.
(B) A European government contractor.
(C) A United States government entity.
(D) A United States government contractor.
(E) A European government entity.
Answer : C;D
NO.29 You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.Which Azure service should you use?
(A) Azure AD Connect Health.
(B) Azure AD Privileged Identity Management.
(C) Azure Advanced Threat Protection (ATP).
(D) Azure AD Identity Protection.
Answer : D
NO.30 To what should an application connect to retrieve security tokens?
(A) An Azure Storage account.
(B) Azure Active Directory (Azure AD).
(C) A certificate store.
(D) An Azure key vault.
Answer : B
NO.31 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.*** RESOURCE GROUPS *** provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Management groups.
(C) Azure policies.
(D) Azure App Service plans.
Answer : C
NO.32 Your network contains an Active Directory forest. The forest contains 5,000 user accounts.Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.You need to recommend a solution to minimize the impact on users after the planned migration.What should you recommend?
(A) Implement Azure Multi-Factor Authentication (MFA).
(B) Sync all the Active Directory user accounts to Azure Active Directory (Azure AD).
(C) Instruct all users to change their password.
(D) Create a guest user account in Azure Active Directory (Azure AD) for each user.
Answer : B
NO.33 Which Azure service should you use to store certificates?
(A) Azure Security Center.
(B) An Azure Storage account.
(C) Azure Key Vault.
(D) Azure Information Protection.
Answer : C
NO.34 What can Azure Information Protection encrypt?
(A) Network traffic.
(B) Documents and email messages.
(C) An Azure Storage account.
(D) An Azure SQL database.
Answer : B
NO.35 What should you use to evaluate whether your company's Azure environment meets regulatory requirements?
(A) The Knowledge Center website.
(B) The Advisor blade from the Azure portal.
(C) Compliance Manager from the Security Trust Portal.
(D) The Security Center blade from the Azure portal.
Answer : D
NO.36 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.Your company implements *** AZURE POLICIES *** to automatically add a watermark to Microsoft Word documents that contain credit card information.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) DDoS protection.
(C) Azure Information Protection.
(D) Azure Active Directory (Azure AD) Identity Protection.
Answer : C
NO.37 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.From *** AZURE MONITOR ***, you can view which user turned off a specific virtual machine during the last 14 days.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Azure Event Hubs.
(C) Azure Activity Log.
(D) Azure Service Health.
Answer : C
NO.38 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.You have an Azure virtual network named VNET1 in a resource group named RG1.You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 *** IS DELETED AUTOMATICALLY ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Is moved automatically to another resource group.
(C) Continues to function normally.
(D) Is now a read-only object.
Answer : C
NO.39 Your company plans to purchase Azure.The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Basic support plan.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.40 What is required to use Azure Cost Management?
(A) A Dev/Test subscription.
(B) Software Assurance.
(C) An Enterprise Agreement (EA).
(D) A pay-as-you-go subscription.
Answer : C;D
NO.41 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.Your Azure trial account expired last week. You are now unable to *** CREATE ADDITIONAL AZURE ACTIVE DIRECTORY (AZURE AD) USER ACCOUNTS ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Start an existing Azure virtual machine.
(C) Access your data stored in Azure.
(D) Access the Azure portal.
Answer : C
NO.42 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.You have several virtual machines in an Azure subscription. You create a new subscription. *** THE VIRTUAL MACHINES CANNOT BE MOVED TO THE NEW SUBSCRIPTION ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) The virtual machines can be moved to the new subscription.
(C) The virtual machines can be moved to the new subscription only if they are all in the same resource group.
(D) The virtual machines can be moved to the new subscription only if they run Windows Server 2016.
Answer : B
NO.43 You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure Subscription Limits.What should you do to increase the limits?
(A) Create a service health alert.
(B) Upgrade your support plan.
(C) Modify an Azure policy.
(D) Create a new support request.
Answer : D
NO.44 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will *** AUTOMATICALLY REFUND YOUR BANK ACCOUNT***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Automatically migrate the resource to another subscription.
(C) Automatically credit your account.
(D) Send you a coupon code that you can redeem for Azure credits.
Answer : C
NO.45 Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator.You need to recommend an Azure deployment that provides the ability to segment Azure for the departments. The solution must minimize administrative effort.What should you include in the recommendation?
(A) Multiple subscriptions.
(B) Multiple Azure Active Directory (Azure AD) directories.
(C) Multiple regions.
(D) Multiple resource groups.
Answer : A
NO.46 Your company has an Azure subscription that contains the following unused resources:20 user accounts in Azure Active Directory (Azure AD).Five groups in Azure AD.10 public IP addresses.10 network interfaces.You need to reduce the Azure costs for the company.Solution: You remove the unused network interfaces.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.47 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.When you need to delegate permissions to several Azure virtual machines simultaneously, you must deploy the Azure virtual machines *** TO THE SAME AZURE REGION ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) By using the same Azure Resource Manager template.
(C) To the same resource group.
(D) To the same availability zone.
Answer : C
NO.48 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.One of the benefits of Azure SQL Data Warehouse is that *** HIGH AVAILABILITY *** is built into the platform.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Automatic scaling.
(C) Data compression.
(D) Versioning.
Answer : A
NO.49 You need to identify the type of failure for which an Azure availability zone can be used to protect access to Azure services.What should you identify?
(A) A physical server failure.
(B) An Azure region failure.
(C) A storage failure.
(D) An Azure data center failure.
Answer : D
NO.50 Your Azure environment contains multiple Azure virtual machines.You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.Solution: You modify a DDoS protection plan.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.51 Your company plans to deploy several web servers and several database servers to Azure.You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.What should you include in the recommendation?
(A) Network security groups (NSGs).
(B) Azure Service Bus.
(C) A local network gateway.
(D) A route filter.
Answer : A
NO.52 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.*** AUTHORIZATION *** is the process of verifying a user's credentials.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Authentication.
(C) Federation.
(D) Ticketing.
Answer : B
NO.53 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.Azure Germany can be used by *** LEGAL RESIDENTS OF GERMANY ONLY ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Only enterprises that are registered in Germany.
(C) Only enterprises that purchase their azure licenses from a partner based in Germany.
(D) Any user or enterprise that requires its data to reside in Germany.
Answer : D
NO.54 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.An organization that hosts its infrastructure *** IN A PRIVATE CLOUD *** can decommission its data center.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) In a hybrid cloud.
(C) In the public cloud.
(D) On a Hyper-V host.
Answer : C
NO.55 When you are implementing a software as a service (SaaS) solution, you are responsible for *** CONFIGURING HIGH AVAILABILITY ***.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Defining scalability rules.
(C) Installing the SaaS solution.
(D) Configuring the SaaS solution.
Answer : D
NO.56 You have an on-premises network that contains several servers.You plan to migrate all the servers to Azure.You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period.What should you include in the recommendation?
(A) Fault tolerance.
(B) Elasticity.
(C) Scalability.
(D) Low latency.
Answer : A
NO.57 You have an Active Directory forest named contoso.com.You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled.You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.You need to ensure that the synchronization completes successfully.What should you do?
(A) Run Azure AD Connect and set the SSO method to Pass-through Authentication.
(B) From Synchronization Service Manager, run a full import.
(C) From Azure PowerShell, run Start-AdSyncSyncCycle ?PolicyType Initial.
(D) Run Azure AD Connect and disable staging mode.
Answer : D
NO.58 You have an Azure Active Directory (Azure AD) tenant.All administrators must enter a verification code to access the Azure portal.You need to ensure that the administrators can access the Azure portal only from your on-premises network.What should you configure?
(A) An Azure AD Identity Protection user risk policy.
(B) The multi-factor authentication service settings.
(C) The default for all the roles in Azure AD Privileged Identity Management.
(D) An Azure AD Identity Protection sign-in risk policy.
Answer : B
NO.59 You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com.You have a Microsoft account that you use to sign in to both tenants.You need to configure the default sign-in tenant for the Azure portal.What should you do?
(A) From Azure Cloud Shell, run Set-AzureRmSubscription.
(B) From Azure Cloud Shell, run Set-AzureRmContext.
(C) From the Azure portal, configure the portal settings.
(D) From the Azure portal, change the directory.
Answer : B
NO.60 You need to limit the amount of inbound traffic to all the Azure virtual networks.What should you create?
(A) One network security group (NSG).
(B) 10 virtual network gateways.
(C) 10 Azure ExpressRoute circuits.
(D) One Azure firewall.
Answer : D
NO.61 What should the company use to build, test, and deploy predictive analytics solutions?
(A) Azure Logic Apps.
(B) Azure Machine Learning Studio.
(C) Azure Batch.
(B) D. Azure Cosmos DB.
Answer : B
NO.62 *** AZURE POLICIES PROVIDE *** a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.Instructions: Review the UPPER-CASED text surrounded by ***. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Resource groups provide.
(C) Azure Resource Manager provides.
(D) Management groups provide.
Answer : C
NO.63 Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that is configured for hybrid coexistence with the on-premises Active Directory Domain.The tenant contains the users shown in the following users.User1: User Type - Member, Source - AzureAD, Sign-in - User1@contoso.com.User2: User Type - Member, Source - Windows Server Active Directory, Sign-in - User2@contoso.com.User3: User Type - Guest, Source - Multiple, Sign-in - User3@outlook.com.User4: User Type - Guest, Source - Multiple, Sign-in - User4@gmail.com.Whenever possible, you need to enable Azure Multi-Factor Authentication (MFA) for the users in contoso.com.Which users should you enable for Azure MFA?
(A) User1 only.
(B) User1, User2, and User3 only.
(C) User1 and User2 only.
(D) User1, User2, User3, and User4.
(E) User2 only.
Answer : D
NO.64 You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.The User administrator role is assigned to a user named Admin1.An external partner has a Microsoft account that uses the user1@outlook.com sign in.Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: ?Unable to invite user.User1@outlook.com ? Generic authorization exception.?.You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant.What should you do?
(A) From the Roles and administrators blade, assign the Security administrator role to Admin1.
(B) From the Organizational relationships blade, add an identity provider.
(C) From the Custom domain names blade, add a custom domain.
(D) From the Users blade, modify the External collaboration settings.
Answer : D
NO.65 You have an Azure DNS zone named adatum.com.You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure.What should you do?
(A) Create an A record named *.research in the adatum.com zone.
(B) Create a PTR record named research in the adatum.com zone.
(C) Modify the SOA record of adatum.com.
(D) Create an NS record named research in the adatum.com zone.
Answer : D
NO.66 Your company has a main office in London that contains 100 client computers.Three years ago, you migrated to Azure Active Directory (Azure AD).The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD.A remote user named User1 is unable to join a personal device to Azure AD from a home network.You verify that other users can join their devices to Azure AD.You need to ensure that User1 can join the device to Azure AD.What should you do?
(A) From the Device settings blade, modify the Users may join devices to Azure AD setting.
(B) From the Device settings blade, modify the Maximum number of devices per user setting.
(C) Create a point-to-site VPN from the home network of User1 to Azure.
(D) Assign the User administrator role to User1.
Answer : B
NO.67 Your company plans to request an architectural review of an Azure environment from Microsoft.The company currently has a Basic support plan.You need to recommend a new support plan for the company. The solution must minimize costs.Which support plan should you recommend?
(A) Premier.
(B) Developer.
(C) Professional Direct.
(D) Standard.
Answer : A
NO.68 You set the multi-factor authentication status for a user named admin1@contoso.com to Enabled.Admin1 accesses the Azure portal by using a web browser.Which additional security verifications can Admin1 use when accessing the Azure portal?
(A) A phone call, a text message that contains a verification code, and a notification or a verification code sent from the Microsoft Authenticator app.
(B) An app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app.
(C) An app password, a text message that contains a verification code, and a verification code sent from the Microsoft Authenticator app.
(D) A phone call, an email message that contains a verification code, and a text message that contains an app password.
Answer : A
NO.69 You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers.Subscription1 contains a resource group named Dev.You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.Solution: On Dev, you assign the Logic App Contributor role to the Developers group.Does this meet the goal?
(A) Yes.
(B) No.
Answer : A
NO.70 You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.You need to view the error events from a table named Event.Which query should you run in Workspace1?
(A) Get-Event Event | where ($_.EventType ?eq "error").
(B) Get-Event Event | where ($_.EventType == "error").
(C) Search in (Event) * | where EventType ?eq "error".
(D) Search in (Event) "error".
(E) Select *from Event where EventType == "error".
(F) Event | where EventType is "error".
Answer : D
NO.71 You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.***Name: RG1,????????????????????Azure region: West Europe,????Policy: Policy1Name: RG2,????????????????????Azure region: North Europe,???Policy: Policy2Name: RG3,????????????????????Azure region: France Central,?Policy: Policy3***RG1 has a web app named WebApp1. WebApp1 is located in West Europe.You move WebApp1 to RG2.What is the effect of the move?
(A) The App Service plan for WebApp1 moves to North Europe. Policy2 applies to WebApp1.
(B) The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.
(C) The App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.
(D) The App Service plan for WebApp1 remains in West Europe. Policy1 applies to WebApp1.
Answer : B
NO.72 You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines.Your company has three cost centers named Manufacturing, Sales, and Finance.You need to associate each virtual machine to a specific cost center.What should you do?
(A) Configure locks for the virtual machine.
(B) Add an extension to the virtual machines.
(C) Assign tags to the virtual machines.
(D) Modify the inventory settings of the virtual machine.
Answer : C
NO.73 You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.You need to view the date and time when the resources were created in RG1.Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.74 You need to move the blueprint files to Azure.What should you do?
(A) Use Azure Storage Explorer to copy the files.
(B) Use the Azure Import/Export service.
(C) Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
(D) Generate an access key. Map a drive, and then copy the files by using File Explorer.
Answer : A
NO.75 You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create a new user account named AdminUser1.You need to assign the User administrator administrative role to AdminUser1.What should you do from the user account properties?
(A) From the Directory role blade, modify the directory role.
(B) From the Licenses blade, assign a new license.
(C) From the Groups blade, invite the user account to a new group.
Answer : A
NO.76 You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.Your company has a public DNS zone for contoso.com.You add contoso.com as a custom domain name to Azure AD.You need to ensure that Azure can verify the domain name.Which type of DNS record should you create?
(A) TXT.
(B) SRV.
(C) DNSKEY.
(C) D. NSEC.
(E) RRSIG.
(F) PTR.
Answer : A
NO.77 You plan to use the Azure Import/Export service to copy files to a storage account.Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) A driveset CSV file.
(B) A JSON configuration file.
(C) A PowerShell PS1 file.
(D) An XML manifest file.
(E) A dataset CSV file.
Answer : A;E
NO.78 You create an Azure Storage account named contosostorage.You plan to create a file share named data.Users need to map a drive to the data file share from home computers that run Windows 10.Which outbound port should you open between the home computers and the data file share?
(A) 80.
(B) 443.
(C) 445.
(D) 3389.
Answer : C
NO.79 You have an Azure subscription that contains the resources in the following table.***Name: RG1,????????????????????Type: Resource groupName: Store1,?????????????????Type: Azure Storage AccountName: Sync1,??????????????????Type: Azure File Sync***Store1 contains a file share named Data. Data contains 5,000 files.You need to synchronize the files in Data to an on-premises server named Server1.Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) Download an automation script.
(B) Register Server1.
(C) Create a sync group.
(D) Create a container instance.
(E) Install the Azure File Sync agent on Server1.
Answer : B;C;E
NO.80 You have the Azure virtual machines shown in the following table.***Name: VM1,????????????????????Azure Region: West EuropeName: VM2,????????????????????Azure Region: West EuropeName: VM3,????????????????????Azure Region: North EuropeName: VM4,????????????????????Azure Region: North Europe***You have a Recovery Services vault that protects VM1 and VM2.You need to protect VM3 and VM4 by using Recovery Services.What should you do first?
(A) Create a new backup policy.
(B) Configure the extensions for VM3 and VM4.
(C) Create a storage account.
(D) Create a new Recovery Services vault.
Answer : D
NO.81 You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.You hire a temporary vendor. The vendor uses a Microsoft account that has a sign-in of user1@outlook.com.You need to ensure that the vendor can authenticate to the tenant by using user1@outlook.com.What should you do?
(A) From the Azure portal, add a custom domain name, create a new Azure AD user, and then specify user1@outlook.com as the username.
(B) From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the "?UserPrincipalName user1@outlook.com" parameter.
(C) From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.
(D) From Windows PowerShell, run the New-AzureADUser cmdlet and specify the "?UserPrincipalName user1@outlook.com" parameter.
Answer : D
NO.82 You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) Modify the extensionProfile section of the Azure Resource Manager template.
(B) Create an automation account.
(C) Upload a configuration script.
(D) Create a new virtual machine scale set in the Azure portal.
(E) Create an Azure policy.
Answer : A;D
NO.83 You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.You plan to make the following changes to VM1:* Change the size to D8s v3.* Add a 500-GB managed disk.* Add the Puppet Agent extension.* Attach an additional network interface.Which change will cause downtime for VM1?
(A) Add the Puppet Agent extension.
(B) Change the size to D8s v3.
(C) Add a 500-GB managed disk.
(D) Attach an additional network interface.
Answer : B
NO.84 You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup.You delete VM1.You need to remove the backup data stored for VM1.What should you do first?
(A) Delete the Recovery Services vault.
(B) Delete the storage account.
(C) Stop the backup.
(D) Modify the backup policy.
Answer : D
NO.85 You have an Azure subscription named Subscription1.You deploy a Linux virtual machine named VM1 to Subscription1.You need to monitor the metrics and the logs of VM1.What should you use?
(A) The AzurePerformanceDiagnostics extension.
(B) Azure HDInsight.
(C) Linux Diagnostic Extension (LAD) 3.0.
(D) Azure Analysis Services.
Answer : A
NO.86 You plan to back up an Azure virtual machine named VM1.You discover that the Backup Pre-Check status displays a status of Warning.What is a possible cause of the Warning status?
(A) VM1 is stopped.
(B) VM1 does not have the latest version of WaAppAgent.exe installed.
(C) VM1 has an unmanaged disk.
(D) A Recovery Services vault is unavailable.
Answer : B
NO.87 You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table:***Name: Storage1,???????????????Type: Storage accountName: RG1,????????????????????Type: Resource groupName: Container1,?????????????Type: Blob containerName: Share1,?????????????????Type: File share***Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template.You need to view the template used for the deployment.From which blade can you view the template that was used for the deployment?
(A) Container1.
(B) RG1.
(C) Share1.
(D) Storage1.
Answer : B
NO.88 You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance.You need to move VM1 to a different host immediately.Solution: From the Redeploy blade, you click Redeploy.Does this meet the goal?
(A) Yes.
(B) No.
Answer : A
NO.89 You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.What should you create to store the password?
(A) An Azure Key Vault and an access policy.
(B) A Recovery Services vault and a backup policy.
(C) Azure Active Directory (AD) Identity Protection and an Azure policy.
(D) An Azure Storage account and an access policy.
Answer : A
NO.90 You have an Azure subscription that contains three virtual networks named VNet1, VNet2, and VNet3. VNet2 contains a virtual appliance named VM2 that operates as a router.You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network.You plan to configure peering between VNet1 and Vnet2 and between VNet2 and VNet3.You need to provide connectivity between VNet1 and VNet3 through VNet2.Which two configurations should you perform? Each correct answer presents part of the solution.
(A) On the peering connections, use remote gateways.
(B) On the peering connections, allow forwarded traffic.
(C) On the peering connections, allow gateway transit.
(D) Create route tables and assign the table to subnets.
(E) Create a route filter.
Answer : A;C
NO.91 You have a public load balancer that balances ports 80 and 443 across three virtual machines.You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only.What should you configure?
(A) An inbound NAT rule.
(B) A load balancing rule.
(C) A new public load balancer for VM3.
(D) A frontend IP configuration.
Answer : A
NO.92 You are troubleshooting a performance issue for an Azure Application Gateway.You need to compare the total requests to the failed requests during the past six hours.What should you use?
(A) NSG flow logs in Azure Network Watcher.
(B) Metrics in Application Gateway.
(C) Connection monitor in Azure Network Watcher.
(D) Diagnostics logs in Application Gateway.
Answer : B
NO.93 You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.You need to connect VNet1 to VNet2.What should you do first?
(A) Move VM1 to Subscription2.
(B) Modify the IP address space of VNet2.
(C) Provision virtual network gateways.
(D) Move VNet1 to Subscription2.
Answer : C
NO.94 You have an Azure subscription that contains the resources in the following table.***Name: VNet1,??????????????????Type: virtual network?????????Azure region: West US?????????Resource group: RG2Name: VNet2,??????????????????Type: virtual network?????????Azure region: West US?????????Resource group: RG1Name: VNet3,??????????????????Type: virtual network?????????Azure region: East US?????????Resource group: RG1Name: NSG1,???????????????????Type: Network security group (NSG)Azure region: East US?????????Resource group: RG2***To which subnets can you apply NSG1?
(A) The subnets on VNet2 only.
(B) The subnets on VNet2 and VNet3 only.
(C) The subnets on VNet1, VNet2, and VNet3.
(D) The subnets on VNet1 only.
(E) The subnets on VNet3 only.
Answer : E
NO.95 You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.You need to ensure that visitors are serviced by the same web server for each request.What should you configure?
(A) Protocol to UDP.
(B) Session persistence to None.
(C) Session persistence to Client IP.
(D) Idle Time-out (minutes) to 20.
Answer : C
NO.96 You have the Azure virtual networks shown in the following table.***Name: VNet1,??????????????????Address space: 10.11.0.0/16,??Subnet: 10.11.0.0/17,?????????Azure Region: West USName: VNet2,??????????????????Address space: 10.11.0.0/17,??Subnet: 10.11.0.0/25,?????????Azure Region: West USName: VNet3,??????????????????Address space: 10.10.0.0/22,??Subnet: 10.10.1.0/24,?????????Azure Region: East USName: VNet4,??????????????????Address space: 192.168.16.0/22,Subnet: 192.168.16.0/24,??????Azure Region: North Europe***To which virtual networks can you establish a peering connection from VNet1?
(A) VNet2 and VNet3 only.
(B) VNet2 only.
(C) VNet3 and VNet4 only.
(D) VNet2, VNet3, and VNet4.
Answer : D
NO.97 You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.You need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) Reset GW1.
(B) Create a route-based virtual network gateway.
(C) Delete GW1.
(D) Add a public IP address space to VNet1.
(E) Add a connection to GW1.
(F) Add a service endpoint to VNet1.
Answer : B;C
NO.98 You have an Azure subscription named Subscription1 that contains the resource groups shown in the following table.***Name: RG1,????????????????????Region: East AsiaName: RG2,????????????????????Region: East US***In RG1, you create a virtual machine named VM1 in the East Asia location.You plan to create a virtual network named VNET1.You need to create VNET1, and then connect VM1 to VNET1.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
(A) Create VNET1 in RG2, and then set East Asia as the location.
(B) Create VNET1 in a new resource group in the West US location, and then set West US as the location.
(C) Create VNET1 in RG1, and then set East US as the location.
(D) Create VNET1 in RG2, and then set East US as the location.
(E) Create VNET1 in RG1, and then set East Asia as the location.
Answer : A;E
NO.99 You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter, NVA, and Production.The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the Perimeter subnet and the Production subnet.You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements:.* The NVAs must run in an active-active configuration that uses automatic failover.* The NVAs must load balance traffic to two services on the Production subnet. The services have different IP addresses.Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
(A) Add two load balancing rules that have HA Ports enabled and Floating IP disabled.
(B) Add a frontend IP configuration, two backend pools, and a health probe.
(C) Add two load balancing rules that have HA Ports and Floating IP enabled.
(D) Deploy a standard load balancer.
(E) Deploy a basic load balancer.
(F) Add a frontend IP configuration a backend pool, and a health probe.
Answer : B;C;D
NO.100 You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Azure Network Watcher, you create a packet capture.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.101 You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1.On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1.You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2.You need to ensure that you can connect Client1 to VNet2.What should you do?
(A) Select Allow gateway transit on VNet2.
(B) Enable BGP on VPNGW1.
(C) Select Allow gateway transit on VNet1.
(D) Download and re-install the VPN client configuration package on Client1.
Answer : D
NO.102 You have an Azure subscription that contains the resources in the following table.***Name: VNet1,??????????????????Type: Virtual network,????????Details: Not applicableName: Subnet1,????????????????Type: Subnet,?????????????????Details: Hosted on VNet1Name: VM1,????????????????????Type: Virtual machine,????????Details: On Subnet1Name: VM2,????????????????????Type: Virtual machine,????????Details: On Subnet1***VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop.You need to prevent users of VM2 and VM2 from accessing websites on the Internet over TCP port 80.What should you do?
(A) Change the DenyWebSites outbound security rule.
(B) Change the Port_80 inbound security rule.
(C) Disassociate the NSG from a network interface.
(D) Associate the NSG to Subnet1.
Answer : D
NO.103 Your company registers a domain name of contoso.com.You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.You need to resolve the name resolution issue.Solution: You create a PTR record for www in the contoso.com zone.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.104 Mark correct statements:
(A) A platform as a service (PaaS) solution that hosts web apps in Azure provides full control of the operating systems that host applications.
(B) A platform as a service (PaaS) solution that hosts web apps in Azure provides the ability to scale the platform automatically.
(C) A platform as a service (PaaS) solution that hosts web apps in Azure provides professional development services to continuously add features to custom applications.
Answer : B;C
NO.105 Mark correct statements:
(A) Azure provides flexibility between capital expenditure (CapEx) and operational expenditure (OpEx).
(B) If you create two Azure virtual machines that use the B2S size, each virtual machine will always generate the same monthly costs.
(C) When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine.
Answer : A;C
NO.106 Your company plans to migrate all its data and resources to Azure.The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure.You need to deploy an Azure environment that supports the planned migration.Solution: You create an Azure App Service and Azure Storage accounts.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.107 Your company plans to migrate all its data and resources to Azure.The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure.You need to deploy an Azure environment that supports the planned migration.Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.108 Your company plans to migrate all its data and resources to Azure.The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure.You need to deploy an Azure environment that supports the planned migration.Solution: You create an Azure App Service and Azure Storage accounts.Does this meet the goal?
(A) Yes.
(B) No.
Answer : B
NO.109 Choose all that apply.
(A) To achieve a hybrid cloud model, a company must always migrate from a private cloud model.
(B) A company can extend the capacity of its internal network by using the public cloud.
(C) In a public cloud model, only guest users at your company can access the resources in the cloud.
Answer : B
NO.110 Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases?Choose all that apply.
(A) Azure virtual machines: Infrastructure as a service (IaaS).
(B) Azure virtual machines: Platform as a service (PaaS).
(C) Azure virtual machines: Software as a service (SaaS).
(D) Azure SQL databases: Infrastructure as a service (IaaS).
(E) Azure SQL databases: Platform as a service (PaaS).
(F) Azure SQL databases: Software as a service (SaaS).
Answer : A;E
NO.111 You plan to migrate several servers from an on-premises network to Azure.You need to identify the primary benefit of using a public cloud service for the servers.What should you identify?
(A) The public cloud is owned by the public, NOT a private corporation.
(B) The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud.
(C) All public cloud resources can be freely accessed by every member of the public.
(D) The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud.
Answer : D
NO.112 You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription.You need to identify which expenditure model to use for the planned Azure solution.Which expenditure model should you identify?
(A) Operational.
(B) Elastic.
(C) Capital.
(D) Scalable.
Answer : A
NO.113 Match the Azure Cloud Services benefit to the correct description.Choose all that apply.
(A) Disaster recovery: A cloud service that remains available after it occurs.
(B) Disaster recovery: A cloud service that can be recovered after it occurs.
(C) Disaster recovery: A cloud service that performs quickly when it increases.
(D) Disaster recovery: A cloud service that can be accessed quickly to the Internet.
(E) Fault tolerance: A cloud service that remains available after it occurs.
(F) Fault tolerance: A cloud service that can be recovered after it occurs.
Answer : B;E
NO.114 Choose all that apply.
(A) Azure resources can only access other resources in the same resource group.
(B) If you delete a resource group, all the resources in the resource group will be deleted.
(C) A resource group can contain resources from multiple Azure regions.
Answer : B;C
NO.115 Your company has an on-premises network that contains multiple servers.The company plans to reduce the following administrative responsibilities of network administrators:* Backing up application data* Replacing failed server hardware* Managing physical server security* Updating server operating systems* Managing permissions to shared documentsThe company plans to migrate several servers to Azure virtual machines.You need to identify which administrative responsibilities will be reduced after the planned migration.Which two responsibilities should you identify? Each correct answer presents a complete solution.
(A) Replacing failed server hardware.
(B) Backing up application data.
(C) Managing physical server security.
(D) Updating server operating systems.
(E) Managing permissions to shared documents.
Answer : A;C
NO.116 You have an Azure environment that contains 10 web apps. To which URL should you connect to manage all the Azure resources?
(A) https://admin.azure.com
(B) https://admin.azurewebsites.com
(C) https://admin.microsoft.com
(D) https://portal.azure.com
(E) https://portal.azurewebsites.com
(F) https://portal.microsoft.com
Answer : D
NO.117 You plan to extend your company?s network to Azure. The network contains a VPN appliance that uses an IP address of 131.107.200.1.You need to create an Azure resource that identifies the VPN appliance.Which Azure resource should you create?
(A) Virtual networks
(B) Load balancers
(C) Virtual network gateways
(D) DNS zones
(E) Traffic Manager profiles
(F) Network Watcher
Answer : G
NO.118 Choose all that apply:
(A) If you have Azure resources deployed to every region, you can implement availability zones in all regions.
(B) Only virtual machines that run Windows Server can be created in availability zones.
(C) Availability zones are used to replicate data and applications to multiple regions.
(D) None of the above
Answer : D
NO.119 Choose all that apply:
(A) Data that is copied to an Azure Storage account is maintained automatically in at least three copies.
(B) All data that is copied to an Azure Storage account is backed up automatically to another Azure data center.
(C) An Azure Storage account can contain up to 2 TB of data and up to one million files.
(D) Choose all that apply:
Answer : A
NO.120 Several support engineers plan to manage Azure by using the computers shown in the following table:Computer 1 - Windows 10Computer 2 - UbuntuComputer 3 - MacOS MojaveYou need to identify which Azure management tools can be used from each computer.Choose three:
(A) Computer 1 - The Azure CLI and Azure portal
(B) Computer 1 - The Azure portal and Azure PowerShell
(C) Computer 1 - The Azure CLI and Azure PowerShell
(D) Computer 1 - The Azure CLI, the Azure portal and Azure PowerShell
(E) Computer 2 - The Azure CLI and Azure portal
(F) Computer 2 - The Azure portal and Azure PowerShell
Answer : D
NO.121 You plan to deploy a critical line-of-business application to Azure.The application will run on an Azure virtual machine.You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent.What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment?
(A) Minimum number of virtual machines: 1
(B) Minimum number of virtual machines: 2
(C) Minimum number of virtual machines: 3
(D) Minimum number of availability zones: 1
(E) Minimum number of availability zones: 2
(F) Minimum number of availability zones: 3
Answer : B;E
NO.122 Choose all that apply:
(A) Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment.
(B) Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines.
(C) Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.
(D) Choose all that apply:
Answer : B
NO.123 Choose all that apply:
(A) All the Azure resources deployed to a single resource group must share the same Azure region.
(B) If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag.
(C) If you set permissions ti a resource group, all the Azure resources in that resource group inherit the permissions.
Answer : C
NO.124 You plan to implement an Azure database solution.You need to implement a database solution that meets the following requirements:Can add data concurrently from multiple regionsCan store JSON documentsWhich database service should you deploy?
(A) Azure Cosmos DB.
(B) Azure Database for MySQL servers.
(C) SQL Servers.
(D) SQL data warehouse.
(E) Azure Database for PostgreSQL servers.
Answer : A
NO.125 You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.Which blade should you use from the Azure portal?
(A) Advisor
(B) Security Center
(C) Cost Management + Billing
(D) Help + support
Answer : D
NO.126 Choose all that apply:
(A) To achieve a hybrid cloud model, a company must always migrate from a private cloud model.
(B) A company can extend the capacity of its internal network by using the public cloud.
(C) In a public cloud model, only guest users at your company can access the resources in the cloud.
Answer : B
NO.127 What is guaranteed in an Azure Service Level Agreement (SLA)?
(A) Uptime
(B) Feature availability
(C) Bandwidth
(D) Performance
Answer : B
NO.128 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.An Azure service is available to all Azure customers when it is in *** PUBLIC PREVIEW ***.Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) Private preview
(C) Development
(D) An Enterprise Agreement (EA) subscription
Answer : A
NO.129 This question requires that you evaluate the UPPER-CASED text surrounded by *** to determine if it is correct.You can create an Azure support request from support.microsoft.com.Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.
(A) No change is needed.
(B) The Azure portal
(C) The Knowledge Center
(D) The Security & Compliance admin center
Answer : B
NO.130 Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office.Which Azure Resource Manager feature should you use before you generate the reports?
(A) Tags
(B) Templates
(C) Locks
(D) Policies
Answer : A